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This appeal is taken from the final Office Action mailed August 24, 2005. hi support of 
the Notice of Appeal filed November 4, 2005, the present Appeal Brief is presented. 

I. REAL PARTY IN INTEREST ; 

The real party in interest in the above-identified application is: Isogon Corporation. 

II. RELATED APPEALS AND INTERFERENCES : 

There are no related appeals or interferences of which applicant is aware regarding the 
above-identified application. 

III. STATUS OF CLAIMS : 

Claims 1, 9, 11-12, and 14-25 stand rejected under 35 U.S.C. §102(e). 
Claims 2-7, 10, 13, 26-27, and 28-33 stand rejected under 35 U.S.C. §103(a) 
Claim 8 has been canceled. ' 01/10/2006 BABRflHfll 00000006 09933540 
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IV. STATUS OF AMENDMENTS : 

A response to the final Office Action was filed on August 24, 2005. A Notice of Appeal 
was filed on November 4, 2005. An Advisory Action was mailed on September 20, 2005. 

V. SUMMARY OF CLAIMED SUBJECT MATTER : 

The invention is directed to improved software auditing system and method whereby the 
execution of software modules can be determined in a manner that does not overly burden system 
resources. Execution information is filtered out and remaining information is correlated with 
other information to determine products which have been executed. The invention is concerned 
with the system resources, and is designed to obtain data for fewer than all of the load modules 
that execute on the system. 

More specifically, the text of claim 1, which is included in the focus of this appeal, reads 
as follows: 

" an operating system of the computer that controls execution in the computer of the 
software products through the invocation of respective load modules thereof; 

"a monitor that is periodically triggered to collect load module execufion information; 

"a filtering facility that is effective to filter at least one previously identified program 
from the load module execution information; 

"a correlator that correlates the filtered load module execution information with data that 
associates load module names with corresponding software products and develops a list of 
software products executed in the computer over the course of a given time period; and 

"a reporter that outputs data reflecting the use of the software products in the computer in 
terms of software product names thereof" 

The remaining independent claims 22, 26 and 28, include similar limitations and are 
similarly the focus of the appeal. 

VI. GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL : 

The following grounds of rejection are presented for review: 

1. Whether claims 1, 9, 11-12, and 14-25 stand rejected under 35 U.S.C. §102(e) as 
being anticipated by Lin et al. ("Lin," U.S. Patent No. 5,949,415). Further, whether claims 2-7, 
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10, 13, and 26-27 stand rejected under 35 U.S.C. §103(a) as being unpatentable over Lin in view 
of Johnson (U.S. Patent No. 6,788,980). Further, whether claims 28-33 stand rejected under 35 
U.S.C. §103(a) as being unpatentable over Lin in view of Evans (U.S. Patent No. 6,430,708). 

VII. ARGUMENT : 

The primary reference relied upon in the Office Action is Lin et al. ("Lin," U.S. Patent 
No. 5,949,415). Respectfully, this primary reference-- Lin. neither anticipates nor suggests the 
invention of claim 1. With respect to portions of claim 1 cited above, the Examiner has referred 
the apphcant to column 9, lines 49-53 (claim 8) and column 10, lines 11-15 (claim 13) of Lin for 
support. Respectfully, careful study of these portions of Lin relied upon shows that this reference 
contains numerous differences and is structurally and functionally, as well, different from the 
claimed invention. 

Contrary to the Examiner's characterization, Lin does not teach or suggest applicant's 
claimed monitor, filtering facility and correlator. According to Lin, a system task list that is 
already maintained by a computer's operating system is referenced to identify active tasks and 
subtasks. Applicant's claim 1, in contrast, defines that the monitor (not the operating system) 
collects load module execution information. 

Furthermore, Lin's detecting step merely extracts an identifier from the system task list 
already generated by an operating system. Also in contrast with Lin, applicant's claim 1 filtering 
facility filters at least one previously identified program from the load module execution 
information. Lin's feature of merely extracting an identifier from an active task list is not 
tantamount to applicant's filtering facility that removes information from collected load module 
execution information. Lin's well known step of extraction does not conserve valuable system 
resources because the entire operating system task list (as opposed to a filtered list) is examined 
in order to extract an identifier. 

Thus, no separate facilities are taught or suggested by Lin that collects load module 
execution information by a monitor and filters by a filtering facility at least one identified 
program from the load module execution information. Respectfully, no description or structure 
is set forth anywhere in Lin's specification that would teach or suggest applicant's claim 1 
"monitor" and "filtering facility" to one skilled in the art. 
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Applicant's independent claims 15 and 22 include similar limitations and, therefore, are 
also not anticipated by Lin. 

Applicant notes that independent claims 22, 26 and 28 also include the above-described 
claim 1 limitations, particularly the "monitor" and "filtering facility." Respectfully, neither 
Johnson nor Evans teaches or suggests the claimed monitor and filtering facihty that is missing 
from the teachings of Lin. Therefore, for at least the reasons set forth above, claims 2-7, 10, 13 
(which depend directly or indirectly fi-om claim 1), claim 27 (which depends fi-om claim 26), and 
claims 29-33 (which depend fi-om directly or indirectly from claim 28) clearly define over the 
prior art, including the combinations of Lin and Johnson, and Lin and Evans. 

VIIL CONCLUSION : 

hi accordance with 37 C.F.R. §41. 37(a)(1), this appeal brief must be filed within two 
months of filing the notice of appeal, under 37 C.F.R. §41.31. Under MPEP §1205.01, "the 
Office date of receipt of the notice of appeal (and not the date indicated on any Certificate of 
Mailing under 37 C.F.R. §1 .8) is the date from which this 2>-<month time period is measured." 
The official date of receipt of the nofice appeal for the present patent application, as stamped by 
the OIPE, is November 7, 2005. Accordingly, the present appeal brief is believed to be filed in a 
timely fashion. 

If, in the alternative, the Patent Office determines that this communication is filed after 
the statutory time period has elapsed. Applicant hereby petitions to extend the time by the 
number of months which will avoid abandonment under 37 C.F.R. § 1.135. The respective fee 
under 37 C.F.R. § 1.17 should be charged to our Deposit Account No. 15-0700. 
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Check No. 23117 in the amount of $250.00 (small entity) to cover the fee for filing an 
Appeal Brief is enclosed. Any additional fees or charges required at this time in connection 
with this application may be charged to Patent and Trademark Office Deposit Account No. 
15-0700. 



I hereby certify that this correspondence is being 
deposited with the United States Postal Service with 
sufficient postage as First Class Mail in an envelope 
addressed to: Mail Stop Appeal Brief - Patents, 
Commissioner for Patents, P.O. Box 1450, 
Alexandria, Virginia 22313-1450, on January 6, 
2006: 

Max Moskowitz 

Name of applicant, assignee or 
Registered : 




January 6, 2006 



Respectfully submitted, 





Max MosKOwitz 
Registration No.:( 
OSTROLENK, FA6ER, GERB & SOFFEN, LLP 
1 180 Avenue of the Americas 
New York, New York 10036-8403 
Telephone: (212)382-0700 



Date of Signature 



MM:JJF:ck 
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CLAIMS APPENDIX 

1 . A system for determining program usage on a computer, the system comprising: 

a plurality of executable software programs constituting software products, each of the 
software products being constituted of one or more load modules, the load modules being stored 
in at least one memory of the computer; 

an operating system of the computer that controls execution in the computer of the 
software products through the invocation of respective load modules thereof; 

a monitor that is periodically triggered to collect load module execution information; 

a filtering facility that is effective to filter at least one previously identified program fi-om 
the load module execution information; 

a correlator that correlates the filtered load module execution information with data that 
associates load module names with corresponding software products and develops a list of 
software products executed in the computer over the course of a given time period; and 

a reporter that outputs data reflecting the use of the software products in the computer in 
terms of software product names thereof 

2. The system of claim 1, in which the monitor operates by taking periodic snapshots of 
the then current state of active processes in the computer. 

3. The system of claim 2, in which the load module execution information includes one 
or more of the following data items: module names, user names, the time when processes were 
started, how much CPU time has been used, and a directory path name from which processes 
were installed. 

4. The system of claim 2, including a facility that allows adjusting the period between 
snapshots in response to program usage activity levels. 

5. The system of claim 2, in which the monitor produces a list of executing load 
modules and their respective directory path names. 
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6. The system of claim 2, including a facility that deteraiines how many processes have 
begun and ended between snapshots. 

7. The system of claim 2, including a facility that compares successive snapshots to 
determine which modules have executed and how many were missed. 

Claim 8 (canceled). 

9. The system of claim 1, including in the load module execution information module 
names and other process related information including directory, start time, and process ID. 

10. The system of claim 2, in which processes are identified by PID (Process IDs) 
numbers and the monitor includes a facility that obtains a measure of missed processes by 
calculating M minus H minus E, where M represents a current PID, H represents the highest PID 
found in a prior snapshot and E represents a count of all processes that have begun since the prior 
snapshot and are still executing. 

1 1 . The system of claim 1 , in which the correlator operates in conjunction with a 
knowledge base that associates load module names with software product names. 

12. The system of claim 1 , further including a surveying program that develops an 
inventory of substantially all software products on the computer and a facility which produces a 
list of non-used software products based on comparing the inventory of software products against 
the data outputted by the reporter which reflects the use of the software products in the computer. 

13. The system of claim 1 1 , in which the knowledge base is a database of records which 
also associates file names to software products that use them and additionally includes at least 
one of the following: flags indicating if a module is used uniquely or shared among vendor 
products; a number indicating file matches required for correlation with the product; file type; 
file size; file creation date; and embedded strings of text. 
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14. The system of claim 1 , in which the correlator operates by correlating module usage 
data with an inventory of software products that itself has been obtained by correlating in a 
knowledge base load module names with software product names. 

15. A system for determining program usage on a computer, the system comprising; 

a plurality of executable software programs constituting software products, each software 
product being constituted in turn of one or more load modules, the load modules being stored in 
at least one memory of the computer; 

an operating system of the computer that controls execution in the computer of the 
software products through the invocation of respective load modules thereof; 

a monitor that collects load module execution information by deducing which load 
modules are being used in given processes of the computer, without directly monitoring the 
actual invocation by the operating system of the load modules; 

a filtering facility that is effective to filter at least one previously identified program fi-om 
the load module execution information; 

a correlator that correlates the filtered load module execution information with data that 
associates load module names with corresponding software products and develops a list of 
products executed in the computer over the course of a given time period; and 

a reporter that outputs data reflecting the use of the software products in the computer in 
terms of software product names thereof 

1 6. The system of claim 1 5, in which the monitor obtains the load module execution 
information from a load module table created by the operating system which makes entries in the 
load module tables as processes are executed and access requests for load modules are made. 

17. The system of claim 1 5, in which the monitor is implemented to execute every time 
the end of a process is reached. 

18. The system of claim 15, in which the monitor executes as an exit routine near the 
end of a process. 
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19. The system of claim 15, in which the monitor gathers and accumulates usage data 
across sub processes of a higher level process so that when the load module table is successively 
read, only those module entries not previously encountered in a prior sub process of the current 
high level process are accumulated and names of load modules already found in the table for the 
current high level process are ignored. 

20. The system of claim 15, in which the correlator operates by identifying the names of 
all software products used by correlating module usage data by using a knowledge base that 
associates the names of load modules with software products they comprise. 

2 1 . The system of claim 1 5, in which the correlator operates by correlating module 
usage data with an inventory of software products that itself has been obtained by correlating in a 
knowledge base load module names with software product names. 

22. A system for determining program usage on a computer, the system comprising: 
a plurality of executable software programs constituting software products, each of the 

software products being constituted of one or more load modules, the load modules being stored 
in at least one memory of the computer; 

an operating system of the computer that controls execution in the computer of software 
products through the invocation of respective load modules thereof; 

a monitor that collects software product execution information by monitoring input or 
output to specific files or datasets by the software products; and 

a filtering facility that is effective to filter at least one previously identified program from 
the software product execution information, wherein such inputs and outputs are associated with 
corresponding software products or groups of software products. 

23. The system of claim 22, in which the monitor is implemented as a background 
process. 
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24. The system of claim 22, in which the monitor is implemented as an intercept 
systematically placed in either or both of a file open and/or file close system function of the 
computer. 

25. The system of claim 22, in which the monitor is operated as a batch process. 

26. A system for determining non-usage of software products on a computer, the system 
comprising: 

a plurality of executable software programs constituting software products, each of the 
software products being constituted of one or more load modules, the load modules being stored 
in at least one memory of the computer; 

an operating system of the computer that controls execution in the computer of software 
products through the invocation of respective load modules thereof; 

a software product surveyor that surveys the at least one memory of the computer and 
produces an inventory of the names of the load modules, the surveyor being operable with an 
associator that identifies and associates and records associations between product names and the 
load module inventory names; 

a monitor that collects load module execution information over a given time period; 

a filtering facility that is effective to filter at least one previously identified program ft-om 
the load module execution information; 

a correlator that correlates the filtered load module execution information with data that 
associates load module names with corresponding software products and develops a Hst of 
products executed in the computer over the course of a selected time period; 

a comparing facility that compares information provided by the correlator to information 
provided directly or indirectly by the surveyor and which produces a list of unused software 
products; and 

a reporter that outputs data reflecting the non-use of software products in the computer. 

27. The system of claim 26, in which the comparator is constructed to delete from the 
inventory those software product names which have been detected by the monitor as having been 
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executed in the computer at least once during the given time period, leaving a list of non-used 
software products. 

28. A system for determining program usage on a computer, the system comprising: 
a plurality of executable software programs constituting software products, each of the 

software products being constituted of one or more load modules, the load modules being stored 
in at least one memory of the computer; 

an operating system of the computer that controls execution in the computer of software 
products through the invocation of respective load modules thereof; 

a monitor that collects load module execution information reflecting the usage of 
software products on the computer; 

a filtering facility that is effective to filter at least one previously identified program from 
the load module execution information; 

a library source determination facility that determines the load library from which each 
executed load module has been loaded; and 

a reporter that outputs data showing respective directory paths for load modules that have 
been executed. 

29. The system of claim 28, in which the library source determination facility obtains a 
Ust of modules that have been used by a particular process, determines the load libraries and their 
search order used by the process, and using a search order determined in a prior step, searches the 
load libraries of the computer for a first library containing the same modules that best matches 
the Hst of modules used. 

30. The system of claim 28, in which the monitor operates as a concurrent process and 
module usage data and load library collection data are both obtained by the monitor and library 
usage is concurrently determined. 

3 1 . The system of claim 29, in which the task of determining the correct load libraries in 
their appropriate search order is carried out as a separate process, wherein one of the module 
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usage data or library collection data is obtained by the monitor and the other is obtained from a 
separate source and processed to determine load library usage. 

32. The system of claim 28, in which the library source determination facihty uses a JCL 
(Job Control Language) interpreter. 

33. The system of claim 28, in which the load library determination facility determines 
both the identity and order of load libraries used by a particular process by reading job control 
language ("JCL") data structures of a current job to obtain a load library list for the process. 
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EVIDENCE APPENDIX 

None. 
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RELATED PROCEEDINGS APPENDIX 
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